This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/4aCYY0RGaMja-Pk9etkR8koJ5JU.roa File: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (raw, json) Hash identifier: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8= Subject key identifier: E1:A0:98:63:44:46:68:C8:DA:F8:F9:3D:7A:D9:11:F2:4A:09:E4:95 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019B7F80C7913CCA0A71C009528176C1363F Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/4aCYY0RGaMja-Pk9etkR8koJ5JU.roa Signing time: Fri 02 Jan 2026 16:18:24 +0000 ROA not before: Fri 02 Jan 2026 16:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399989 IP address blocks: 109.111.44.0/22 maxlen: 22 109.111.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:c7:91:3c:ca:0a:71:c0:09:52:81:76:c1:36:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Jan 2 16:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1a09863444668c8daf8f93d7ad911f24a09e495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:c9:69:82:6b:d0:de:5b:1d:aa:b7:c1:23: 80:a0:11:45:e2:e5:f5:70:6e:da:1e:98:fe:99:72: 35:82:de:85:3a:8e:18:85:1e:9a:19:1f:4f:21:43: e5:47:c9:cf:d3:0b:05:bc:f5:58:e5:2d:36:3e:1e: 39:be:11:6b:3e:09:27:0a:be:3b:9c:d7:d2:6a:ae: cc:63:19:56:8a:b1:23:e0:bd:22:01:da:a6:48:bd: 51:e4:f3:65:f2:74:5f:17:6f:a0:3e:8b:fe:90:ec: fd:5d:45:b6:ca:8a:52:db:6a:6e:c4:9d:14:b3:f9: a7:66:08:dd:e4:94:ea:17:61:77:4a:6f:d5:d8:7e: c2:92:0b:91:75:aa:64:59:2f:8d:c5:82:30:d2:9a: e5:de:a6:1d:07:01:dd:5e:33:17:11:e5:2d:86:e5: a5:fa:c8:bc:e7:8d:2f:32:f7:8d:0d:25:fe:2a:53: 00:ea:ca:89:34:cc:eb:e4:44:fb:3f:92:26:8f:2a: 3d:c9:a2:89:ec:1b:6d:c5:3f:fd:87:b7:85:2c:0f: 65:e8:3e:2a:44:11:d2:b6:65:37:7c:89:c7:1f:39: 9b:48:7d:99:4e:cc:f8:46:47:f4:13:3f:bd:26:2b: 3a:c5:a5:15:db:82:d9:27:e8:65:41:98:ab:2d:3e: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A0:98:63:44:46:68:C8:DA:F8:F9:3D:7A:D9:11:F2:4A:09:E4:95 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/4aCYY0RGaMja-Pk9etkR8koJ5JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.111.44.0/22 109.111.60.0/22 Signature Algorithm: sha256WithRSAEncryption 15:94:3e:31:89:bf:66:fc:f0:33:09:3e:ab:28:43:e1:27:53: fa:d6:ee:1b:d8:b7:fc:1a:af:f2:2f:80:c7:5a:37:b6:e3:a8: 1a:52:63:30:40:9d:fd:55:0b:8a:4a:fa:02:ea:76:7a:bd:d0: 55:16:61:b7:ca:5c:51:69:66:60:94:9c:39:a2:f5:ba:4a:2b: 17:a9:ed:f2:76:28:2e:98:c7:04:1e:1a:3a:8d:56:aa:86:69: aa:b1:3d:97:69:a4:4d:d5:43:e6:17:a4:42:13:14:81:70:9f: a6:4c:dc:85:96:e8:3e:3f:9b:68:66:e6:c5:90:dd:d6:c1:fa: 99:45:9b:12:91:38:77:9e:5e:34:0b:0c:33:a0:80:89:79:7f: a8:1b:df:fb:cc:59:60:42:ed:9e:15:58:dc:1c:45:8e:bd:8b: 54:eb:66:17:23:a9:9a:85:f3:a4:16:da:81:cc:b5:7f:ad:ab: 14:e0:1f:7e:b6:37:3b:d0:d5:14:e5:67:4d:83:a9:9f:50:21: ca:05:55:fb:e8:5c:d0:1b:87:4d:9e:51:24:16:de:6c:5c:67: b9:69:69:48:b4:9a:07:f5:6c:13:11:4f:20:31:11:4b:6b:ce: 48:db:c8:c4:18:0b:1d:f2:6f:c0:7b:dd:4b:02:b6:e3:10:2f: 51:40:2d:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gMeRPMoKccAJUoF2wTY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMTAyMTYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWEwOTg2MzQ0NDY2OGM4ZGFmOGY5M2Q3YWQ5MTFmMjRhMDllNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWvJaYJr0N5bHaq3wSOAoBFF4uX1 cG7aHpj+mXI1gt6FOo4YhR6aGR9PIUPlR8nP0wsFvPVY5S02Ph45vhFrPgknCr47 nNfSaq7MYxlWirEj4L0iAdqmSL1R5PNl8nRfF2+gPov+kOz9XUW2yopS22puxJ0U s/mnZgjd5JTqF2F3Sm/V2H7CkguRdapkWS+NxYIw0prl3qYdBwHdXjMXEeUthuWl +si8540vMveNDSX+KlMA6sqJNMzr5ET7P5Imjyo9yaKJ7BttxT/9h7eFLA9l6D4q RBHStmU3fInHHzmbSH2ZTsz4Rkf0Ez+9Jis6xaUV24LZJ+hlQZirLT6CZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOGgmGNERmjI2vj5PXrZEfJKCeSVMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvNGFDWVkwUkdhTWphLVBrOWV0a1I4a29KNUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCbW8sAwQC bW88MA0GCSqGSIb3DQEBCwUAA4IBAQAVlD4xib9m/PAzCT6rKEPhJ1P61u4b2Lf8 Gq/yL4DHWje246gaUmMwQJ39VQuKSvoC6nZ6vdBVFmG3ylxRaWZglJw5ovW6SisX qe3ydigumMcEHho6jVaqhmmqsT2XaaRN1UPmF6RCExSBcJ+mTNyFlug+P5toZubF kN3WwfqZRZsSkTh3nl40CwwzoICJeX+oG9/7zFlgQu2eFVjcHEWOvYtU62YXI6ma hfOkFtqBzLV/rasU4B9+tjc70NUU5WdNg6mfUCHKBVX76FzQG4dNnlEkFt5sXGe5 aWlItJoH9WwTEU8gMRFLa85I28jEGAsd8m/Ae91LArbjEC9RQC21 -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:29 2026 by rpki-client